CVE-2018-19211

In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.

Affected products

Suse, Ubuntu, Ncurses

Invisible-island Ncurses

= 6.1

Fix

Available

CVSS 3.0

5.5 MEDIUM

EPSS

0.9% (55th percentile)

Weakness

CWE-476

NVD status

Modified

Published

2018-11-12

No exploit for CVE-2018-19211 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.